Not sure if this is a good place for this post or not, but here goes.

I reject outbound connections to meta domains at the firewall. I noticed this banking app refuses to prompt for login credentials unless I am on mobile or a public WiFi network. I watched my FW logs and noticed many rejected connections to graph[.]facebook[.]com.

I contacted their support team, but they denied the connection was their app. I shared the screenshot on this post and they closed my case without comment.

I emailed the address on the Google play store and they also denied the connection was their app. I shared the screenshot and they asked if I downloaded the app from the play store, implying the official app doesn't do this, but of course it does.They closed my case without proper resolution as well.

Just thought I'd share this here so people know that some banks make direct connections to Facebook to share analytics, without your knowledge or informed consent, and they lie about it when called on it.

you are viewing a single comment's thread
view the rest of the comments
[–] 22 points 3 years ago (12 children)

how would that explain connection to facebook?

  • source
  • parent
  • hideshow 12 child comments
  • [–] 49 points 3 years ago (1 child)

    It is not only Facebook that is been block if you take the time to read the log you will see the NTP connection is being block too.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 3 years ago

    The app in the screenshot is just capturing packets. The list shown are connections made during the capture and closed just means the connection is not currently active.

    That said, I downloaded Ally, ran that same packet capture but never saw anything sent to Facebook. I got to the login screen just fine.

  • source
  • parent
  • [–] 6 points 3 years ago (5 children)

    Is it normal that a bank app tries to connect to meta?

  • source
  • parent
  • hideshow 5 child comments
  • [–] 25 points 3 years ago* (4 children)

    Meta provides a lot of other backend B2B services beyond just Facebook, Instagram, and Threads.

    You think that's the only way they have of scarfing down data? Absolutely not, they make other useful tools as well that businesses can use, because if they can't get their info directly from you, they can get it from the people you have to regularly interact with instead.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 8 points 3 years ago (3 children)

    This is gross… but also not something I’ve really thought about.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 3 years ago

    The implication is that OP’s assessment is incorrect and the blocked requests to launchdarkly are what’s preventing them from logging in. The Facebook requests don’t show a source so they could be from another device.

  • source
  • parent